Sr Azure Cloud Engineer

!!ONSITE 2-3 DAYS A WEEK!!Senior Azure Cloud EngineerThe OpportunityWe are seeking a Senior Azure Cloud Network Engineer to lead the design, implementation, and optimization of complex, enterprise-scale network solutions within Microsoft Azure. This role requires deep technical expertise, strategic thinking, and the ability to drive cloud networking standards, security, and automation across the organization.Key ResponsibilitiesLead the architecture and design of scalable, secure Azure network environments, including VNets, segmentation strategies, and IP address management.Own and design hybrid and multi-region connectivity solutions using VPN Gateway and ExpressRouteEstablish and enforce network design standards, governance models, and best practices across cloud environmentsCollaborate with security architects and engineers to help infrastructure/platform teams establish foundational network security capabilities and define zero trust standards. These standards will satisfy NIST SP 800-171. They will include network standards, trust boundaries, segmentation, inspection points, logging, and approval gates.Architect and implement advanced network security solutions including Azure Firewall, NSG's, Azure Front Door, Private Endpoints/Private Link, Secure DNS, ingress/egress control, SIEM, M&A Process, policy-as-code guardrails, WAF, DDoS Protection, and Zero Trust frameworks (traffic inspection, segmentation, end-to-end encryption).Design will support CMMC Level 2 (NIST SP 800-171) items such as default-deny segmentation, east-west traffic control, integration with SIEM (Rapid7) and incident response processesServe as the escalation point for complex network issues and lead root cause analysis for critical incidentsDrive performance optimization strategies including load balancing, traffic routing, and global distribution (Traffic Manager, Front Door)Design and lead Infrastructure as Code (IaC) initiatives using Terraform, Bicep, or ARM templates to standardize deploymentsPartner with cloud engineers, security teams, and application owners to align networking solutions with business and technical requirementsProvide technical leadership, mentorship, and guidance to junior and mid-level engineersLead network-related change management activities, including participation in Change Advisory Boards (CAB) and risk assessmentsEnsure compliance with enterprise security policies, regulatory requirements, and industry standardsDevelop and maintain high-level and low-level design documentation (HLD/LLD), traffic & routing flow diagrams, firewall & NSG rule matrices, logging requirements, exception management processRequired Skills & Qualifications7+ years of experience in network engineering, with significant experience in cloud networking within AzureDeep expertise in Azure networking services (VNets, peering, Private Endpoints, DNS, Load Balancers, Application Gateway, Network Security Zero Trust Guidance)Strong experience designing hybrid connectivity (Site-to-Site, Point-to-Site VPNs, ExpressRoute, BGP routing)Advanced understanding of networking protocols (TCP/IP, DNS, HTTP/S, routing, NAT, firewalls)Proven experience implementing network security architectures and Zero Trust modelsStrong scripting and automation experience (PowerShell, Azure CLI, Terraform, or Bicep)Expertise in network monitoring, diagnostics, and performance tuningDemonstrated ability to troubleshoot and resolve complex, enterprise-level networking issuesQualificationsBachelor's degree in Computer Science, Information Technology, Engineering, or related field, or equivalent experience.7+ years in network engineering and operations, including 3+ years in leadership capacity.Proven experience designing and operating Azure networking components.Strong understanding of networking protocols (BGP, OSPF, TCP/IP, DNS, DHCP, VLANs, VPNs, SD-WAN).Experience implementing network security controls, zero-trust architectures, and defense-in-depth strategies.Demonstrated player/coach leadership style with ability to mentor teams while remaining technically hands-on.Strong collaboration skills and experience working with cross-functional teams including Cloud and Security teams.Ability to balance strategic planning with operational execution in fast-paced environments.Preferred SkillsExperience designing multi-region and highly available cloud architecturesFamiliarity with multi-cloud networking (AWS, GCP) and inter-cloud connectivityKnowledge of identity integration (Azure AD / Entra ID) in network security designExperience with DevOps practices, CI/CD pipelines, and Git-based workflowsExposure to container networking (AKS) and microservices architecturesUnderstanding of compliance frameworks (e.g., NIST, ISO 27001, SOC 2)Certifications (Preferred)Azure Network Engineer Associate (AZ-700)Azure Solutions Architect Expert (AZ-305)Azure Administrator Associate (AZ-104)Leadership & Soft SkillsStrong leadership and mentoring capabilitiesAbility to influence architectural decisions and drive standards across teamsExcellent communication skills with both technical and non-technical stakeholdersStrategic thinker with a proactive approach to problem-solvingAbility to manage multiple priorities in a fast-paced environmentWork EnvironmentCross-functional collaboration with architecture, security, and operations teamsParticipation in on-call rotation and incident response leadership7183